b14g pauses all contracts after 97M CORE tokens withdrawn without authorization.
Security & Exploits ·
Approximately 97M CORE tokens were removed without authorization from addresses staked through b14g, prompting the platform to halt affected contracts immediately upon detection. The withdrawn funds were directed to attacker-controlled addresses, with tracing efforts revealing roughly 68M CORE still present on the Core network and around 9M CORE frozen by exchange partners. Bitcoin staked through b14g remained secure, held under time-locks on the Bitcoin network and unaffected by the incident.
b14g is coordinating with the Core team, security firms, and exchanges to investigate the breach, track the stolen assets, and execute recovery measures. The platform has committed to publishing a technical post-mortem detailing how the unauthorized withdrawal occurred and its scope of impact.
The incident highlights ongoing risks in staking infrastructure. Questions remain about the vulnerability's root cause, the full extent of affected user positions, and the timeline and likelihood of fund recovery. The platform has identified two attacker addresses for monitoring but additional details on the breach vector and preventive measures are pending.